$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04/3918d96d-ec82-3d51-91a7-3a2529db41f1.roa File: 3918d96d-ec82-3d51-91a7-3a2529db41f1.roa (raw, json) Hash identifier: xXwC6nLYiviBvyq1LFJ2hQVTtP2I9cO9YvXg6Qs4+8g= Subject key identifier: B4:5B:11:AC:F3:A4:0D:F2:C7:7C:AF:18:50:E3:28:05:6A:2C:FD:63 Certificate issuer: /CN=bd65975e-d229-45b7-bdbe-46ab8f5d4d04 Certificate serial: 010D0C9F4328584E66DA0990CC216E814474D980 Authority key identifier: 09:4E:6C:2D:07:E8:0C:96:4C:E7:1F:D5:AD:F3:A2:E7:9E:3C:F2:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04/3918d96d-ec82-3d51-91a7-3a2529db41f1.roa Signing time: Sun 05 Jul 2026 21:00:11 +0000 ROA not before: Sun 05 Jul 2026 21:00:11 +0000 ROA not after: Sat 03 Oct 2026 21:00:11 +0000 asID: 9009 IP address blocks: 72.18.92.0/24 maxlen: 24 72.18.93.0/24 maxlen: 24 72.18.94.0/24 maxlen: 24 72.18.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:66:da:09:90:cc:21:6e:81:44:74:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd65975e-d229-45b7-bdbe-46ab8f5d4d04 Validity Not Before: Jul 5 21:00:11 2026 GMT Not After : Oct 3 21:00:11 2026 GMT Subject: CN=aec9d657-7a00-4c72-8051-1f92d291fd55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:5a:96:b5:9e:25:78:1f:36:df:6e:9b:88:ef: f5:fd:3d:c0:a6:e6:34:52:b3:10:4a:8a:5c:9e:4e: bf:63:eb:b3:39:6e:e8:a8:c0:28:45:98:ae:c0:f2: c9:53:e1:94:c6:2a:05:3f:22:55:1a:91:17:4f:f2: 0f:bc:21:3e:c0:8a:4f:3a:94:fe:fb:7e:e1:1e:60: 7c:c5:44:bf:96:92:23:00:c7:b0:52:b9:c8:cd:00: c2:37:4c:3e:0a:18:45:3d:99:2c:cf:0b:e8:6b:99: 13:2f:55:53:eb:68:32:79:16:f3:31:12:ca:d9:1e: 89:50:c8:cf:0f:17:3f:d7:25:ff:6b:95:0f:ac:b0: 57:15:c0:90:8c:82:d5:e8:d4:79:66:a3:20:48:af: 9c:88:14:66:21:e9:4d:f5:b7:ab:27:f4:25:0c:80: 43:76:75:4e:8d:65:35:8b:1c:fa:e7:98:81:55:57: 62:10:08:d9:e8:b0:e7:d4:77:a9:93:29:ad:ab:7c: a2:2a:85:85:74:f2:9a:05:a6:7b:7f:e2:6c:68:f3: a7:e3:a6:87:0c:1b:da:8f:d2:e0:be:bf:63:7b:29: a5:0e:f9:e9:17:a0:47:e7:a5:9e:46:2a:50:fd:dc: 12:b2:22:ac:2b:83:22:f3:0c:46:30:e1:69:cf:a4: 6e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:5B:11:AC:F3:A4:0D:F2:C7:7C:AF:18:50:E3:28:05:6A:2C:FD:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04/3918d96d-ec82-3d51-91a7-3a2529db41f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.crl X509v3 Authority Key Identifier: keyid:09:4E:6C:2D:07:E8:0C:96:4C:E7:1F:D5:AD:F3:A2:E7:9E:3C:F2:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.cer sbgp-ipAddrBlock: critical IPv4: 72.18.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:a1:a2:ef:1d:2f:fc:66:ae:29:6f:f4:f5:a3:eb:be:a7:d6: 41:fc:39:03:b8:1a:6d:3f:dd:97:5e:07:04:f1:ac:dd:c0:6a: 7a:54:5f:40:e8:1d:47:6c:0f:a5:61:40:19:41:f8:1a:d2:4c: 13:d6:9f:f5:db:17:45:7a:50:ba:8a:32:b6:b9:80:c0:50:6c: 55:0e:bc:5e:99:7e:30:f1:3e:a1:17:86:50:31:3a:93:d1:c7: 10:af:00:52:cb:a3:18:4b:ae:5a:1f:f3:fa:21:9c:d3:f7:db: 5c:1f:d6:3d:14:d2:83:15:ae:89:a2:64:f6:6e:76:47:12:bc: 25:f0:27:b9:50:d4:cc:da:f9:00:80:fb:bc:74:92:32:f4:65: e7:9d:a9:68:73:66:a5:ae:e9:87:9c:42:d3:9c:43:b4:95:24: d2:fa:1c:b5:05:5c:eb:17:14:c9:0e:95:73:58:6a:e1:4a:35: 7c:c8:76:b6:00:a5:3e:f5:4f:3a:53:cd:d5:63:05:e2:5b:7e: 5b:0f:e1:a2:28:fe:9a:b8:e4:d1:71:e1:50:eb:16:94:a5:23: 9a:fd:03:bd:14:d9:ba:4a:3a:ab:47:b9:8a:34:c3:d4:34:ed: 6f:e6:43:f0:a3:74:eb:5e:0e:42:f9:f8:80:fd:1a:9b:38:45: 0e:d2:54:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5m2gmQzCFugUR02YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmQ2NTk3NWUtZDIyOS00NWI3LWJkYmUtNDZhYjhmNWQ0 ZDA0MB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk YWVjOWQ2NTctN2EwMC00YzcyLTgwNTEtMWY5MmQyOTFmZDU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1qWtZ4leB82326biO/1/T3ApuY0UrMQSopc nk6/Y+uzOW7oqMAoRZiuwPLJU+GUxioFPyJVGpEXT/IPvCE+wIpPOpT++37hHmB8 xUS/lpIjAMewUrnIzQDCN0w+ChhFPZkszwvoa5kTL1VT62gyeRbzMRLK2R6JUMjP Dxc/1yX/a5UPrLBXFcCQjILV6NR5ZqMgSK+ciBRmIelN9berJ/QlDIBDdnVOjWU1 ixz655iBVVdiEAjZ6LDn1Hepkymtq3yiKoWFdPKaBaZ7f+JsaPOn46aHDBvaj9Lg vr9jeymlDvnpF6BH56WeRipQ/dwSsiKsK4Mi8wxGMOFpz6Ru4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLRbEazzpA3yx3yvGFDjKAVqLP1jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZDY1 OTc1ZS1kMjI5LTQ1YjctYmRiZS00NmFiOGY1ZDRkMDQvMzkxOGQ5NmQtZWM4Mi0z ZDUxLTkxYTctM2EyNTI5ZGI0MWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmQ2NTk3NWUtZDIyOS00NWI3LWJk YmUtNDZhYjhmNWQ0ZDA0L2JkNjU5NzVlLWQyMjktNDViNy1iZGJlLTQ2YWI4ZjVk NGQwNC5jcmwwHwYDVR0jBBgwFoAUCU5sLQfoDJZM5x/VrfOi55488pMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZDY1OTc1ZS1kMjI5LTQ1YjctYmRiZS00NmFi OGY1ZDRkMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSBJcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIShou8dL/xmrilv9PWj676n1kH8OQO4Gm0/3ZdeBwTxrN3AanpUX0Do HUdsD6VhQBlB+BrSTBPWn/XbF0V6ULqKMra5gMBQbFUOvF6ZfjDxPqEXhlAxOpPR xxCvAFLLoxhLrlof8/ohnNP321wf1j0U0oMVromiZPZudkcSvCXwJ7lQ1Mza+QCA +7x0kjL0ZeedqWhzZqWu6YecQtOcQ7SVJNL6HLUFXOsXFMkOlXNYauFKNXzIdrYA pT71TzpTzdVjBeJbflsP4aIo/pq45NFx4VDrFpSlI5r9A70U2bpKOqtHuYo0w9Q0 7W/mQ/CjdOteDkL5+ID9Gps4RQ7SVAw= -----END CERTIFICATE-----Generated at Thu Jul 23 23:11:47 2026 by rpki-client